diff --git a/Makefile.rhelver b/Makefile.rhelver
index a05458649..75b9922ea 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 2
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 198
+RHEL_RELEASE = 199
 
 #
 # RHEL_REBASE_NUM
diff --git a/def_variants.yaml.rhel b/def_variants.yaml.rhel
index 27e1aca80..1c2fd7c75 100644
--- a/def_variants.yaml.rhel
+++ b/def_variants.yaml.rhel
@@ -332,6 +332,7 @@ rules:
   - drivers/usb/gadget/function/usb_f_midi2.*: modules
   - drivers/usb/image/.*: modules
   - drivers/usb/misc/trancevibrator.*: modules-extra
+  - drivers/usb/misc/usbio.ko: modules-core
   - drivers/usb/misc/.*: modules
   - drivers/usb/serial/.*: modules
   - drivers/usb/typec/mux/nb7vpq904m.*: modules
diff --git a/kernel-aarch64-64k-debug-rhel.config b/kernel-aarch64-64k-debug-rhel.config
index 7bc234988..29aa1139b 100644
--- a/kernel-aarch64-64k-debug-rhel.config
+++ b/kernel-aarch64-64k-debug-rhel.config
@@ -5395,7 +5395,6 @@ CONFIG_QCOM_L3_PMU=y
 # CONFIG_QCOM_PDC is not set
 # CONFIG_QCOM_PD_MAPPER is not set
 CONFIG_QCOM_QDF2400_ERRATUM_0065=y
-# CONFIG_QCOM_QFPROM is not set
 # CONFIG_QCOM_QSEECOM is not set
 # CONFIG_QCOM_RAMP_CTRL is not set
 # CONFIG_QCOM_RMTFS_MEM is not set
diff --git a/kernel-aarch64-64k-rhel.config b/kernel-aarch64-64k-rhel.config
index 9ca19c7c1..fcf9b9e9a 100644
--- a/kernel-aarch64-64k-rhel.config
+++ b/kernel-aarch64-64k-rhel.config
@@ -5372,7 +5372,6 @@ CONFIG_QCOM_L3_PMU=y
 # CONFIG_QCOM_PDC is not set
 # CONFIG_QCOM_PD_MAPPER is not set
 CONFIG_QCOM_QDF2400_ERRATUM_0065=y
-# CONFIG_QCOM_QFPROM is not set
 # CONFIG_QCOM_QSEECOM is not set
 # CONFIG_QCOM_RAMP_CTRL is not set
 # CONFIG_QCOM_RMTFS_MEM is not set
diff --git a/kernel-aarch64-debug-rhel.config b/kernel-aarch64-debug-rhel.config
index c7fb83586..fb0915866 100644
--- a/kernel-aarch64-debug-rhel.config
+++ b/kernel-aarch64-debug-rhel.config
@@ -5391,7 +5391,6 @@ CONFIG_QCOM_L3_PMU=y
 # CONFIG_QCOM_PDC is not set
 # CONFIG_QCOM_PD_MAPPER is not set
 CONFIG_QCOM_QDF2400_ERRATUM_0065=y
-# CONFIG_QCOM_QFPROM is not set
 # CONFIG_QCOM_QSEECOM is not set
 # CONFIG_QCOM_RAMP_CTRL is not set
 # CONFIG_QCOM_RMTFS_MEM is not set
diff --git a/kernel-aarch64-rhel.config b/kernel-aarch64-rhel.config
index 8cde516bd..a773681bc 100644
--- a/kernel-aarch64-rhel.config
+++ b/kernel-aarch64-rhel.config
@@ -5368,7 +5368,6 @@ CONFIG_QCOM_L3_PMU=y
 # CONFIG_QCOM_PDC is not set
 # CONFIG_QCOM_PD_MAPPER is not set
 CONFIG_QCOM_QDF2400_ERRATUM_0065=y
-# CONFIG_QCOM_QFPROM is not set
 # CONFIG_QCOM_QSEECOM is not set
 # CONFIG_QCOM_RAMP_CTRL is not set
 # CONFIG_QCOM_RMTFS_MEM is not set
diff --git a/kernel-aarch64-rt-64k-debug-rhel.config b/kernel-aarch64-rt-64k-debug-rhel.config
index 87b1d94bc..19d2dd7b5 100644
--- a/kernel-aarch64-rt-64k-debug-rhel.config
+++ b/kernel-aarch64-rt-64k-debug-rhel.config
@@ -5439,7 +5439,6 @@ CONFIG_QCOM_L3_PMU=y
 # CONFIG_QCOM_PDC is not set
 # CONFIG_QCOM_PD_MAPPER is not set
 CONFIG_QCOM_QDF2400_ERRATUM_0065=y
-# CONFIG_QCOM_QFPROM is not set
 # CONFIG_QCOM_QSEECOM is not set
 # CONFIG_QCOM_RAMP_CTRL is not set
 # CONFIG_QCOM_RMTFS_MEM is not set
diff --git a/kernel-aarch64-rt-64k-rhel.config b/kernel-aarch64-rt-64k-rhel.config
index 72d3de17a..0c107e26a 100644
--- a/kernel-aarch64-rt-64k-rhel.config
+++ b/kernel-aarch64-rt-64k-rhel.config
@@ -5416,7 +5416,6 @@ CONFIG_QCOM_L3_PMU=y
 # CONFIG_QCOM_PDC is not set
 # CONFIG_QCOM_PD_MAPPER is not set
 CONFIG_QCOM_QDF2400_ERRATUM_0065=y
-# CONFIG_QCOM_QFPROM is not set
 # CONFIG_QCOM_QSEECOM is not set
 # CONFIG_QCOM_RAMP_CTRL is not set
 # CONFIG_QCOM_RMTFS_MEM is not set
diff --git a/kernel-aarch64-rt-debug-rhel.config b/kernel-aarch64-rt-debug-rhel.config
index c2c5c329d..e3772f337 100644
--- a/kernel-aarch64-rt-debug-rhel.config
+++ b/kernel-aarch64-rt-debug-rhel.config
@@ -5435,7 +5435,6 @@ CONFIG_QCOM_L3_PMU=y
 # CONFIG_QCOM_PDC is not set
 # CONFIG_QCOM_PD_MAPPER is not set
 CONFIG_QCOM_QDF2400_ERRATUM_0065=y
-# CONFIG_QCOM_QFPROM is not set
 # CONFIG_QCOM_QSEECOM is not set
 # CONFIG_QCOM_RAMP_CTRL is not set
 # CONFIG_QCOM_RMTFS_MEM is not set
diff --git a/kernel-aarch64-rt-rhel.config b/kernel-aarch64-rt-rhel.config
index 22186867f..5887aafde 100644
--- a/kernel-aarch64-rt-rhel.config
+++ b/kernel-aarch64-rt-rhel.config
@@ -5412,7 +5412,6 @@ CONFIG_QCOM_L3_PMU=y
 # CONFIG_QCOM_PDC is not set
 # CONFIG_QCOM_PD_MAPPER is not set
 CONFIG_QCOM_QDF2400_ERRATUM_0065=y
-# CONFIG_QCOM_QFPROM is not set
 # CONFIG_QCOM_QSEECOM is not set
 # CONFIG_QCOM_RAMP_CTRL is not set
 # CONFIG_QCOM_RMTFS_MEM is not set
diff --git a/kernel-ppc64le-debug-rhel.config b/kernel-ppc64le-debug-rhel.config
index 7b81f6a63..5d1416c58 100644
--- a/kernel-ppc64le-debug-rhel.config
+++ b/kernel-ppc64le-debug-rhel.config
@@ -4952,7 +4952,6 @@ CONFIG_QCA83XX_PHY=m
 # CONFIG_QCOM_OCMEM is not set
 # CONFIG_QCOM_PDC is not set
 # CONFIG_QCOM_PD_MAPPER is not set
-# CONFIG_QCOM_QFPROM is not set
 # CONFIG_QCOM_RAMP_CTRL is not set
 # CONFIG_QCOM_RMTFS_MEM is not set
 # CONFIG_QCOM_RPM_MASTER_STATS is not set
diff --git a/kernel-ppc64le-rhel.config b/kernel-ppc64le-rhel.config
index d0d348789..4f92ee234 100644
--- a/kernel-ppc64le-rhel.config
+++ b/kernel-ppc64le-rhel.config
@@ -4931,7 +4931,6 @@ CONFIG_QCA83XX_PHY=m
 # CONFIG_QCOM_OCMEM is not set
 # CONFIG_QCOM_PDC is not set
 # CONFIG_QCOM_PD_MAPPER is not set
-# CONFIG_QCOM_QFPROM is not set
 # CONFIG_QCOM_RAMP_CTRL is not set
 # CONFIG_QCOM_RMTFS_MEM is not set
 # CONFIG_QCOM_RPM_MASTER_STATS is not set
diff --git a/kernel-riscv64-debug-rhel.config b/kernel-riscv64-debug-rhel.config
index f326de20d..efe9bfd4e 100644
--- a/kernel-riscv64-debug-rhel.config
+++ b/kernel-riscv64-debug-rhel.config
@@ -4866,7 +4866,6 @@ CONFIG_QCA83XX_PHY=m
 # CONFIG_QCOM_OCMEM is not set
 # CONFIG_QCOM_PDC is not set
 # CONFIG_QCOM_PD_MAPPER is not set
-# CONFIG_QCOM_QFPROM is not set
 # CONFIG_QCOM_RAMP_CTRL is not set
 # CONFIG_QCOM_RMTFS_MEM is not set
 # CONFIG_QCOM_RPM_MASTER_STATS is not set
diff --git a/kernel-riscv64-rhel.config b/kernel-riscv64-rhel.config
index 92b1f51c2..101f8317c 100644
--- a/kernel-riscv64-rhel.config
+++ b/kernel-riscv64-rhel.config
@@ -4845,7 +4845,6 @@ CONFIG_QCA83XX_PHY=m
 # CONFIG_QCOM_OCMEM is not set
 # CONFIG_QCOM_PDC is not set
 # CONFIG_QCOM_PD_MAPPER is not set
-# CONFIG_QCOM_QFPROM is not set
 # CONFIG_QCOM_RAMP_CTRL is not set
 # CONFIG_QCOM_RMTFS_MEM is not set
 # CONFIG_QCOM_RPM_MASTER_STATS is not set
diff --git a/kernel-s390x-debug-rhel.config b/kernel-s390x-debug-rhel.config
index 5bfcff908..52de78c57 100644
--- a/kernel-s390x-debug-rhel.config
+++ b/kernel-s390x-debug-rhel.config
@@ -4889,7 +4889,6 @@ CONFIG_QCA83XX_PHY=m
 # CONFIG_QCOM_OCMEM is not set
 # CONFIG_QCOM_PDC is not set
 # CONFIG_QCOM_PD_MAPPER is not set
-# CONFIG_QCOM_QFPROM is not set
 # CONFIG_QCOM_RAMP_CTRL is not set
 # CONFIG_QCOM_RMTFS_MEM is not set
 # CONFIG_QCOM_RPM_MASTER_STATS is not set
diff --git a/kernel-s390x-rhel.config b/kernel-s390x-rhel.config
index 311c588d6..664cbe170 100644
--- a/kernel-s390x-rhel.config
+++ b/kernel-s390x-rhel.config
@@ -4868,7 +4868,6 @@ CONFIG_QCA83XX_PHY=m
 # CONFIG_QCOM_OCMEM is not set
 # CONFIG_QCOM_PDC is not set
 # CONFIG_QCOM_PD_MAPPER is not set
-# CONFIG_QCOM_QFPROM is not set
 # CONFIG_QCOM_RAMP_CTRL is not set
 # CONFIG_QCOM_RMTFS_MEM is not set
 # CONFIG_QCOM_RPM_MASTER_STATS is not set
diff --git a/kernel-s390x-zfcpdump-rhel.config b/kernel-s390x-zfcpdump-rhel.config
index 09a1c88f1..0d8327752 100644
--- a/kernel-s390x-zfcpdump-rhel.config
+++ b/kernel-s390x-zfcpdump-rhel.config
@@ -4880,7 +4880,6 @@ CONFIG_QCA83XX_PHY=m
 # CONFIG_QCOM_OCMEM is not set
 # CONFIG_QCOM_PDC is not set
 # CONFIG_QCOM_PD_MAPPER is not set
-# CONFIG_QCOM_QFPROM is not set
 # CONFIG_QCOM_RAMP_CTRL is not set
 # CONFIG_QCOM_RMTFS_MEM is not set
 # CONFIG_QCOM_RPM_MASTER_STATS is not set
diff --git a/kernel-x86_64-debug-rhel.config b/kernel-x86_64-debug-rhel.config
index 45152978d..cea808dc8 100644
--- a/kernel-x86_64-debug-rhel.config
+++ b/kernel-x86_64-debug-rhel.config
@@ -5227,7 +5227,6 @@ CONFIG_QCA83XX_PHY=m
 # CONFIG_QCOM_OCMEM is not set
 # CONFIG_QCOM_PDC is not set
 # CONFIG_QCOM_PD_MAPPER is not set
-# CONFIG_QCOM_QFPROM is not set
 # CONFIG_QCOM_RAMP_CTRL is not set
 # CONFIG_QCOM_RMTFS_MEM is not set
 # CONFIG_QCOM_RPM_MASTER_STATS is not set
diff --git a/kernel-x86_64-rhel.config b/kernel-x86_64-rhel.config
index 66a60dfb9..484957fd5 100644
--- a/kernel-x86_64-rhel.config
+++ b/kernel-x86_64-rhel.config
@@ -5205,7 +5205,6 @@ CONFIG_QCA83XX_PHY=m
 # CONFIG_QCOM_OCMEM is not set
 # CONFIG_QCOM_PDC is not set
 # CONFIG_QCOM_PD_MAPPER is not set
-# CONFIG_QCOM_QFPROM is not set
 # CONFIG_QCOM_RAMP_CTRL is not set
 # CONFIG_QCOM_RMTFS_MEM is not set
 # CONFIG_QCOM_RPM_MASTER_STATS is not set
diff --git a/kernel-x86_64-rt-debug-rhel.config b/kernel-x86_64-rt-debug-rhel.config
index 7c8edb1e9..f64900b4e 100644
--- a/kernel-x86_64-rt-debug-rhel.config
+++ b/kernel-x86_64-rt-debug-rhel.config
@@ -5271,7 +5271,6 @@ CONFIG_QCA83XX_PHY=m
 # CONFIG_QCOM_OCMEM is not set
 # CONFIG_QCOM_PDC is not set
 # CONFIG_QCOM_PD_MAPPER is not set
-# CONFIG_QCOM_QFPROM is not set
 # CONFIG_QCOM_RAMP_CTRL is not set
 # CONFIG_QCOM_RMTFS_MEM is not set
 # CONFIG_QCOM_RPM_MASTER_STATS is not set
diff --git a/kernel-x86_64-rt-rhel.config b/kernel-x86_64-rt-rhel.config
index 45348cdcb..9680a7bfb 100644
--- a/kernel-x86_64-rt-rhel.config
+++ b/kernel-x86_64-rt-rhel.config
@@ -5249,7 +5249,6 @@ CONFIG_QCA83XX_PHY=m
 # CONFIG_QCOM_OCMEM is not set
 # CONFIG_QCOM_PDC is not set
 # CONFIG_QCOM_PD_MAPPER is not set
-# CONFIG_QCOM_QFPROM is not set
 # CONFIG_QCOM_RAMP_CTRL is not set
 # CONFIG_QCOM_RMTFS_MEM is not set
 # CONFIG_QCOM_RPM_MASTER_STATS is not set
diff --git a/kernel.changelog b/kernel.changelog
index 2b2fb6b69..27b61cc2e 100644
--- a/kernel.changelog
+++ b/kernel.changelog
@@ -1,3 +1,163 @@
+* Wed Feb 04 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-199.el10]
+- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (Maurizio Lombardi) [RHEL-106984]
+- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (Maurizio Lombardi) [RHEL-106984]
+- s390/drivers: Remove unnecessary include <linux/export.h> (Mete Durlu) [RHEL-99994]
+- scsi: zfcp: Simplify workqueue allocation (Mete Durlu) [RHEL-99994]
+- s390/zfcp: Remove outdated email address (Mete Durlu) [RHEL-99994]
+- redhat/configs: rename CONFIG_QCOM_QFPROM to CONFIG_NVMEM_QCOM_QFPROM (Eric Chanudet) [RHEL-144943]
+- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144337] {CVE-2026-22998}
+- redhat: add usbio kmod placement rule (Jan Stancek) [RHEL-139637]
+- net: ipv4: convert ip_rcv_options to drop reasons (Antoine Tenart) [RHEL-139232]
+- net: ipv4: simplify drop reason handling in ip_rcv_finish_core (Antoine Tenart) [RHEL-139232]
+- net: ipv4: make udp_v4_early_demux explicitly return drop reason (Antoine Tenart) [RHEL-139232]
+- tcp: prefer sk_skb_reason_drop() (Antoine Tenart) [RHEL-139232]
+- net/sched: Add precise drop reason for pfifo_fast queue overflows (Antoine Tenart) [RHEL-139232]
+- net: track pfmemalloc drops via SKB_DROP_REASON_PFMEMALLOC (Antoine Tenart) [RHEL-139232]
+- net: arp: use kfree_skb_reason() in arp_rcv() (Antoine Tenart) [RHEL-139232]
+- can: add drop reasons in CAN protocols receive path (Antoine Tenart) [RHEL-139232]
+- can: add drop reasons in the receive path of AF_CAN (Antoine Tenart) [RHEL-139232]
+- net: neigh: use kfree_skb_reason() in neigh_resolve_output() and neigh_connected_output() (Antoine Tenart) [RHEL-139232]
+- net: flush_backlog() small changes (Antoine Tenart) [RHEL-139232]
+- drm/amdkfd: Fix improper NULL termination of queue restore SMI event string (Anusha Srivatsa) [RHEL-142315]
+- drm/amd/display: Fix DP no audio issue (Anusha Srivatsa) [RHEL-142315]
+- drm/amd/pm: force send pcie parmater on navi1x (Anusha Srivatsa) [RHEL-142315]
+- drm/amd/pm: fix wrong pcie parameter on navi1x (Anusha Srivatsa) [RHEL-142315]
+- drm/amd/display: shrink struct members (Anusha Srivatsa) [RHEL-142315]
+- drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] (Anusha Srivatsa) [RHEL-142315]
+- drm/tidss: Fix enable/disable order (Anusha Srivatsa) [RHEL-142315]
+- drm/atomic-helper: Export and namespace some functions (Anusha Srivatsa) [RHEL-142315]
+- drm/amdgpu: Fix query for VPE block_type and ip_count (Anusha Srivatsa) [RHEL-142315]
+- drm/amd/display: Apply e4479aecf658 to dml (Anusha Srivatsa) [RHEL-142315]
+- Revert "drm/atomic-helper: Re-order bridge chain pre-enable and post-disable" (Anusha Srivatsa) [RHEL-142315]
+- nouveau: don't attempt fwsec on sb on newer platforms. (Anusha Srivatsa) [RHEL-142315]
+- drm/imagination: Disallow exporting of PM/FW protected objects (Anusha Srivatsa) [RHEL-142315]
+- drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb (Anusha Srivatsa) [RHEL-142315]
+- drm/pagemap, drm/xe: Ensure that the devmem allocation is idle before use (Anusha Srivatsa) [RHEL-142315]
+- drm/xe/svm: Fix a debug printout (Anusha Srivatsa) [RHEL-142315]
+- drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer (Anusha Srivatsa) [RHEL-142315]
+- drm/xe: Drop preempt-fences when destroying imported dma-bufs. (Anusha Srivatsa) [RHEL-142315]
+- drm/xe: Use usleep_range for accurate long-running workload timeslicing (Anusha Srivatsa) [RHEL-142315]
+- drm/xe: Adjust long-running workload timeslices to reasonable values (Anusha Srivatsa) [RHEL-142315]
+- drm/xe/eustall: Disallow 0 EU stall property values (Anusha Srivatsa) [RHEL-142315]
+- drm/xe/oa: Disallow 0 OA property values (Anusha Srivatsa) [RHEL-142315]
+- drm/xe/bo: Don't include the CCS metadata in the dma-buf sg-table (Anusha Srivatsa) [RHEL-142315]
+- drm: Fix object leak in DRM_IOCTL_GEM_CHANGE_HANDLE (Anusha Srivatsa) [RHEL-142315]
+- drm/mgag200: Fix big-endian support (Anusha Srivatsa) [RHEL-142315]
+- drm/ttm: Avoid NULL pointer deref for evicted BOs (Anusha Srivatsa) [RHEL-142315]
+- drm/i915: Fix format string truncation warning (Anusha Srivatsa) [RHEL-142315]
+- drm/amdkfd: Trap handler support for expert scheduling mode (Anusha Srivatsa) [RHEL-142315]
+- drm/amdkfd: bump minimum vgpr size for gfx1151 (Anusha Srivatsa) [RHEL-142315]
+- drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace (Anusha Srivatsa) [RHEL-142315]
+- drm/nouveau/gsp: Allocate fwsec-sb at boot (Anusha Srivatsa) [RHEL-142315]
+- drm/bridge: ti-sn65dsi83: ignore PLL_UNLOCK errors (Anusha Srivatsa) [RHEL-142315]
+- drm/amd: Fix unbind/rebind for VCN 4.0.5 (Anusha Srivatsa) [RHEL-142315]
+- drm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl() (Anusha Srivatsa) [RHEL-142315]
+- drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() (Anusha Srivatsa) [RHEL-142315]
+- drm/buddy: Separate clear and dirty free block trees (Anusha Srivatsa) [RHEL-142315]
+- drm/buddy: Optimize free block management with RB tree (Anusha Srivatsa) [RHEL-142315]
+- drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling (Anusha Srivatsa) [RHEL-142315]
+- drm/amdgpu/sdma6: Update SDMA 6.0.3 FW version to include UMQ protected-fence fix (Anusha Srivatsa) [RHEL-142315]
+- drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma (Anusha Srivatsa) [RHEL-142315]
+- drm/amdgpu: Forward VMID reservation errors (Anusha Srivatsa) [RHEL-142315]
+- drm/amdgpu/gmc12: add amdgpu_vm_handle_fault() handling (Anusha Srivatsa) [RHEL-142315]
+- Revert "drm/amd: Skip power ungate during suspend for VPE" (Anusha Srivatsa) [RHEL-142315]
+- drm/xe/guc: READ/WRITE_ONCE g2h_fence->done (Anusha Srivatsa) [RHEL-142315]
+- drm/gem-shmem: Fix the MODULE_LICENSE() string (Anusha Srivatsa) [RHEL-142315]
+- drm/amdgpu: don't attach the tlb fence for SI (Anusha Srivatsa) [RHEL-142315]
+- drm/displayid: add quirk to ignore DisplayID checksum errors (Anusha Srivatsa) [RHEL-142315]
+- drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct drm_edid_ident (Anusha Srivatsa) [RHEL-142315]
+- drm: nova: depend on CONFIG_64BIT (Anusha Srivatsa) [RHEL-142315]
+- drm/displayid: pass iter to drm_find_displayid_extension() (Anusha Srivatsa) [RHEL-142315]
+- drm/amd/display: Fix scratch registers offsets for DCN351 (Anusha Srivatsa) [RHEL-142315]
+- drm/amd/display: Fix scratch registers offsets for DCN35 (Anusha Srivatsa) [RHEL-142315]
+- drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() (Anusha Srivatsa) [RHEL-142315]
+- Revert "drm/amd/display: Fix pbn to kbps Conversion" (Anusha Srivatsa) [RHEL-142315]
+- drm/xe/oa: Always set OAG_OAGLBCTXCTRL_COUNTER_RESUME (Anusha Srivatsa) [RHEL-142315]
+- drm/xe/oa: Limit num_syncs to prevent oversized allocations (Anusha Srivatsa) [RHEL-142315]
+- drm/xe: Limit num_syncs to prevent oversized allocations (Anusha Srivatsa) [RHEL-142315]
+- drm/amdgpu: fix a job->pasid access race in gpu recovery (Anusha Srivatsa) [RHEL-142315]
+- drm/panel: sony-td4353-jdi: Enable prepare_prev_first (Anusha Srivatsa) [RHEL-142315]
+- drm/xe: Restore engine registers before restarting schedulers after GT reset (Anusha Srivatsa) [RHEL-142315]
+- drm/xe: Increase TDF timeout (Anusha Srivatsa) [RHEL-142315]
+- drm/me/gsc: mei interrupt top half should be in irq disabled context (Anusha Srivatsa) [RHEL-142315]
+- drm/xe: fix drm_gpusvm_init() arguments (Anusha Srivatsa) [RHEL-142315]
+- drm/xe: Apply Wa_14020316580 in xe_gt_idle_enable_pg() (Anusha Srivatsa) [RHEL-142315]
+- drm/xe: Fix freq kobject leak on sysfs_create_files failure (Anusha Srivatsa) [RHEL-142315]
+- drm/tests: Handle EDEADLK in set_up_atomic_state() (Anusha Srivatsa) [RHEL-142315]
+- drm/tests: Handle EDEADLK in drm_test_check_valid_clones() (Anusha Srivatsa) [RHEL-142315]
+- drm/tests: hdmi: Handle drm_kunit_helper_enable_crtc_connector() returning EDEADLK (Anusha Srivatsa) [RHEL-142315]
+- drm/i915/fbdev: Hold runtime PM ref during fbdev BO creation (Anusha Srivatsa) [RHEL-142315]
+- drm/{i915, xe}/fbdev: deduplicate struct drm_mode_fb_cmd2 init (Anusha Srivatsa) [RHEL-142315]
+- drm/{i915, xe}/fbdev: pass struct drm_device to intel_fbdev_fb_alloc() (Anusha Srivatsa) [RHEL-142315]
+- drm/i915/fbdev: make intel_framebuffer_create() error return handling explicit (Anusha Srivatsa) [RHEL-142315]
+- drm/xe/fbdev: use the same 64-byte stride alignment as i915 (Anusha Srivatsa) [RHEL-142315]
+- drm/amdkfd: Use huge page size to check split svm range alignment (Anusha Srivatsa) [RHEL-142315]
+- drm/nouveau: fix circular dep oops from vendored i2c encoder (Anusha Srivatsa) [RHEL-142315]
+- drm/nouveau: refactor deprecated strcpy (Anusha Srivatsa) [RHEL-142315]
+- drm/plane: Fix IS_ERR() vs NULL check in drm_plane_create_hotspot_properties() (Anusha Srivatsa) [RHEL-142315]
+- drm/panel: novatek-nt35560: avoid on-stack device structure (Anusha Srivatsa) [RHEL-142315]
+- drm/panthor: Prevent potential UAF in group creation (Anusha Srivatsa) [RHEL-142315]
+- drm/amdkfd: assign AID to uuid in topology for SPX mode (Anusha Srivatsa) [RHEL-142315]
+- drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() (Anusha Srivatsa) [RHEL-142315]
+- drm/panthor: Avoid adding of kernel BOs to extobj list (Anusha Srivatsa) [RHEL-142315]
+- drm/nouveau: restrict the flush page to a 32-bit address (Anusha Srivatsa) [RHEL-142315]
+- drm/tidss: Move OLDI mode validation to OLDI bridge mode_valid hook (Anusha Srivatsa) [RHEL-142315]
+- drm/tidss: Remove max_pclk_khz and min_pclk_khz from tidss display features (Anusha Srivatsa) [RHEL-142315]
+- drm/panthor: Fix potential memleak of vma structure (Anusha Srivatsa) [RHEL-142315]
+- drm/panthor: Fix UAF on kernel BO VA nodes (Anusha Srivatsa) [RHEL-142315]
+- drm/panthor: Fix race with suspend during unplug (Anusha Srivatsa) [RHEL-142315]
+- drm/panthor: Fix UAF race between device unplug and FW event processing (Anusha Srivatsa) [RHEL-142315]
+- drm/panthor: Fix group_free_queue() for partially initialized queues (Anusha Srivatsa) [RHEL-142315]
+- drm/panthor: Handle errors returned by drm_sched_entity_init() (Anusha Srivatsa) [RHEL-142315]
+- drm/imagination: Fix reference to devm_platform_get_and_ioremap_resource() (Anusha Srivatsa) [RHEL-142315]
+- accel/ivpu: Fix race condition when unbinding BOs (Anusha Srivatsa) [RHEL-142315]
+- drm: nova: select NOVA_CORE (Anusha Srivatsa) [RHEL-142315]
+- accel/ivpu: Remove skip of dma unmap for imported buffers (Anusha Srivatsa) [RHEL-142315]
+- drm/rcar-du: dsi: Fix missing parameter in RXSETR_...EN macros (Anusha Srivatsa) [RHEL-142315]
+- drm/amdgpu/userq: fix SDMA and compute validation (Anusha Srivatsa) [RHEL-142315]
+- drm/amdgpu: add userq object va track helpers (Anusha Srivatsa) [RHEL-142315]
+- accel/ivpu: Fix race condition when mapping dmabuf (Anusha Srivatsa) [RHEL-142315]
+- drm: atmel-hlcdc: fix atmel_xlcdc_plane_setup_scaler() (Anusha Srivatsa) [RHEL-142315]
+- drm/vgem-fence: Fix potential deadlock on release (Anusha Srivatsa) [RHEL-142315]
+- accel/ivpu: Fix DCT active percent format (Anusha Srivatsa) [RHEL-142315]
+- accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context() (Anusha Srivatsa) [RHEL-142315]
+- accel/ivpu: Rework bind/unbind of imported buffers (Anusha Srivatsa) [RHEL-142315]
+- drm/panel: visionox-rm69299: Don't clear all mode flags (Anusha Srivatsa) [RHEL-142315]
+- drm/panel: visionox-rm69299: Fix clock frequency for SHIFT6mq (Anusha Srivatsa) [RHEL-142315]
+- accel/ivpu: Ensure rpm_runtime_put in case of engine reset/resume fail (Anusha Srivatsa) [RHEL-142315]
+- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-138056]
+- lib/freader: support reading more than 2 folios (Waiman Long) [RHEL-138056]
+- lib: move freader into buildid.h (Waiman Long) [RHEL-138056]
+- sfc: fix potential memory leak in efx_mae_process_mport() (Michal Schmidt) [RHEL-96527 RHEL-99226]
+- sfc: replace min/max nesting with clamp() (Michal Schmidt) [RHEL-96527 RHEL-99226]
+- PCI/ERR: Remove remnants of .link_reset() callback (Michal Schmidt) [RHEL-96527 RHEL-99226]
+- sfc: unfix not-a-typo in comment (Michal Schmidt) [RHEL-96527 RHEL-99226]
+- net: Fix typos [sfc] (Michal Schmidt) [RHEL-96527 RHEL-99226]
+- sfc: falcon: refactor and document ef4_ethtool_get_rxfh_fields (Michal Schmidt) [RHEL-96527 RHEL-99226]
+- sfc: siena: eliminate xdp_rxq_info_valid using XDP base API (Michal Schmidt) [RHEL-96527 RHEL-99226]
+- sfc: eliminate xdp_rxq_info_valid using XDP base API (Michal Schmidt) [RHEL-96527 RHEL-99226]
+- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138021] {CVE-2025-38415}
+- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138021] {CVE-2025-38415}
+- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137980] {CVE-2025-38172}
+- perf/x86/intel/cstate: Add Clearwater Forest support (Michael Petlan) [RHEL-45066]
+- cpuidle: governors: menu: Select polling state in some more cases (Mark Langsdorf) [RHEL-120323]
+- cpuidle: governors: menu: Rearrange main loop in menu_select() (Mark Langsdorf) [RHEL-120323]
+- cpuidle: governors: menu: Avoid selecting states with too much latency (Mark Langsdorf) [RHEL-120323]
+- cpuidle: governors: menu: Avoid using invalid recent intervals data (Mark Langsdorf) [RHEL-120323]
+- cpuidle: psci: Fix cpuhotplug routine with PREEMPT_RT=y (Mark Langsdorf) [RHEL-120323]
+- cpuidle: dt: fix opencoded for_each_cpu() in idle_state_valid() (Mark Langsdorf) [RHEL-120323]
+- cpuidle: psci: Drop redundant sync_state support (Mark Langsdorf) [RHEL-120323]
+- cpuidle: psci: Opt-out from genpd's common ->sync_state() support (Mark Langsdorf) [RHEL-120323]
+- cpuidle: psci: Fix uninitialized variable in dt_idle_state_present() (Mark Langsdorf) [RHEL-120323]
+- cpuidle: psci: Avoid initializing faux device if no DT idle states are present (Mark Langsdorf) [RHEL-120323]
+- cpuidle: psci: Correct the domain-idlestate statistics in debugfs (Mark Langsdorf) [RHEL-120323]
+- cpuidle: psci: Move the per CPU variable domain_state to a struct (Mark Langsdorf) [RHEL-120323]
+- pmdomain: core: Add genpd helper to correct the usage/rejected counters (Mark Langsdorf) [RHEL-120323]
+- cpuidle: psci: Transition to the faux device interface (Mark Langsdorf) [RHEL-120323]
+- cpuidle: menu: Optimize bucket assignment when next_timer_ns equals KTIME_MAX (Mark Langsdorf) [RHEL-120323]
+- cpuidle: teo: Fix typos in two comments (Mark Langsdorf) [RHEL-120323]
+Resolves: RHEL-106984, RHEL-120323, RHEL-137980, RHEL-138021, RHEL-138056, RHEL-139232, RHEL-139637, RHEL-142315, RHEL-144337, RHEL-144943, RHEL-45066, RHEL-96527, RHEL-99226, RHEL-99994
+
 * Tue Feb 03 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-198.el10]
 - s390/cio: Update purge function to unregister the unused subchannels (Mete Durlu) [RHEL-145335]
 - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145336]
diff --git a/kernel.spec b/kernel.spec
index b3993753c..4875b91ac 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -176,15 +176,15 @@ Summary: The Linux kernel
 %define specrpmversion 6.12.0
 %define specversion 6.12.0
 %define patchversion 6.12
-%define pkgrelease 198
+%define pkgrelease 199
 %define kversion 6
-%define tarfile_release 6.12.0-198.el10
+%define tarfile_release 6.12.0-199.el10
 # This is needed to do merge window version magic
 %define patchlevel 12
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 198%{?buildid}%{?dist}
+%define specrelease 199%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 6.12.0-198.el10
+%define kabiversion 6.12.0-199.el10
 
 # If this variable is set to 1, a bpf selftests build failure will cause a
 # fatal kernel package build error
@@ -4481,6 +4481,165 @@ fi\
 #
 #
 %changelog
+* Wed Feb 04 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-199.el10]
+- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (Maurizio Lombardi) [RHEL-106984]
+- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (Maurizio Lombardi) [RHEL-106984]
+- s390/drivers: Remove unnecessary include <linux/export.h> (Mete Durlu) [RHEL-99994]
+- scsi: zfcp: Simplify workqueue allocation (Mete Durlu) [RHEL-99994]
+- s390/zfcp: Remove outdated email address (Mete Durlu) [RHEL-99994]
+- redhat/configs: rename CONFIG_QCOM_QFPROM to CONFIG_NVMEM_QCOM_QFPROM (Eric Chanudet) [RHEL-144943]
+- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144337] {CVE-2026-22998}
+- redhat: add usbio kmod placement rule (Jan Stancek) [RHEL-139637]
+- net: ipv4: convert ip_rcv_options to drop reasons (Antoine Tenart) [RHEL-139232]
+- net: ipv4: simplify drop reason handling in ip_rcv_finish_core (Antoine Tenart) [RHEL-139232]
+- net: ipv4: make udp_v4_early_demux explicitly return drop reason (Antoine Tenart) [RHEL-139232]
+- tcp: prefer sk_skb_reason_drop() (Antoine Tenart) [RHEL-139232]
+- net/sched: Add precise drop reason for pfifo_fast queue overflows (Antoine Tenart) [RHEL-139232]
+- net: track pfmemalloc drops via SKB_DROP_REASON_PFMEMALLOC (Antoine Tenart) [RHEL-139232]
+- net: arp: use kfree_skb_reason() in arp_rcv() (Antoine Tenart) [RHEL-139232]
+- can: add drop reasons in CAN protocols receive path (Antoine Tenart) [RHEL-139232]
+- can: add drop reasons in the receive path of AF_CAN (Antoine Tenart) [RHEL-139232]
+- net: neigh: use kfree_skb_reason() in neigh_resolve_output() and neigh_connected_output() (Antoine Tenart) [RHEL-139232]
+- net: flush_backlog() small changes (Antoine Tenart) [RHEL-139232]
+- drm/amdkfd: Fix improper NULL termination of queue restore SMI event string (Anusha Srivatsa) [RHEL-142315]
+- drm/amd/display: Fix DP no audio issue (Anusha Srivatsa) [RHEL-142315]
+- drm/amd/pm: force send pcie parmater on navi1x (Anusha Srivatsa) [RHEL-142315]
+- drm/amd/pm: fix wrong pcie parameter on navi1x (Anusha Srivatsa) [RHEL-142315]
+- drm/amd/display: shrink struct members (Anusha Srivatsa) [RHEL-142315]
+- drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] (Anusha Srivatsa) [RHEL-142315]
+- drm/tidss: Fix enable/disable order (Anusha Srivatsa) [RHEL-142315]
+- drm/atomic-helper: Export and namespace some functions (Anusha Srivatsa) [RHEL-142315]
+- drm/amdgpu: Fix query for VPE block_type and ip_count (Anusha Srivatsa) [RHEL-142315]
+- drm/amd/display: Apply e4479aecf658 to dml (Anusha Srivatsa) [RHEL-142315]
+- Revert "drm/atomic-helper: Re-order bridge chain pre-enable and post-disable" (Anusha Srivatsa) [RHEL-142315]
+- nouveau: don't attempt fwsec on sb on newer platforms. (Anusha Srivatsa) [RHEL-142315]
+- drm/imagination: Disallow exporting of PM/FW protected objects (Anusha Srivatsa) [RHEL-142315]
+- drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb (Anusha Srivatsa) [RHEL-142315]
+- drm/pagemap, drm/xe: Ensure that the devmem allocation is idle before use (Anusha Srivatsa) [RHEL-142315]
+- drm/xe/svm: Fix a debug printout (Anusha Srivatsa) [RHEL-142315]
+- drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer (Anusha Srivatsa) [RHEL-142315]
+- drm/xe: Drop preempt-fences when destroying imported dma-bufs. (Anusha Srivatsa) [RHEL-142315]
+- drm/xe: Use usleep_range for accurate long-running workload timeslicing (Anusha Srivatsa) [RHEL-142315]
+- drm/xe: Adjust long-running workload timeslices to reasonable values (Anusha Srivatsa) [RHEL-142315]
+- drm/xe/eustall: Disallow 0 EU stall property values (Anusha Srivatsa) [RHEL-142315]
+- drm/xe/oa: Disallow 0 OA property values (Anusha Srivatsa) [RHEL-142315]
+- drm/xe/bo: Don't include the CCS metadata in the dma-buf sg-table (Anusha Srivatsa) [RHEL-142315]
+- drm: Fix object leak in DRM_IOCTL_GEM_CHANGE_HANDLE (Anusha Srivatsa) [RHEL-142315]
+- drm/mgag200: Fix big-endian support (Anusha Srivatsa) [RHEL-142315]
+- drm/ttm: Avoid NULL pointer deref for evicted BOs (Anusha Srivatsa) [RHEL-142315]
+- drm/i915: Fix format string truncation warning (Anusha Srivatsa) [RHEL-142315]
+- drm/amdkfd: Trap handler support for expert scheduling mode (Anusha Srivatsa) [RHEL-142315]
+- drm/amdkfd: bump minimum vgpr size for gfx1151 (Anusha Srivatsa) [RHEL-142315]
+- drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace (Anusha Srivatsa) [RHEL-142315]
+- drm/nouveau/gsp: Allocate fwsec-sb at boot (Anusha Srivatsa) [RHEL-142315]
+- drm/bridge: ti-sn65dsi83: ignore PLL_UNLOCK errors (Anusha Srivatsa) [RHEL-142315]
+- drm/amd: Fix unbind/rebind for VCN 4.0.5 (Anusha Srivatsa) [RHEL-142315]
+- drm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl() (Anusha Srivatsa) [RHEL-142315]
+- drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() (Anusha Srivatsa) [RHEL-142315]
+- drm/buddy: Separate clear and dirty free block trees (Anusha Srivatsa) [RHEL-142315]
+- drm/buddy: Optimize free block management with RB tree (Anusha Srivatsa) [RHEL-142315]
+- drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling (Anusha Srivatsa) [RHEL-142315]
+- drm/amdgpu/sdma6: Update SDMA 6.0.3 FW version to include UMQ protected-fence fix (Anusha Srivatsa) [RHEL-142315]
+- drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma (Anusha Srivatsa) [RHEL-142315]
+- drm/amdgpu: Forward VMID reservation errors (Anusha Srivatsa) [RHEL-142315]
+- drm/amdgpu/gmc12: add amdgpu_vm_handle_fault() handling (Anusha Srivatsa) [RHEL-142315]
+- Revert "drm/amd: Skip power ungate during suspend for VPE" (Anusha Srivatsa) [RHEL-142315]
+- drm/xe/guc: READ/WRITE_ONCE g2h_fence->done (Anusha Srivatsa) [RHEL-142315]
+- drm/gem-shmem: Fix the MODULE_LICENSE() string (Anusha Srivatsa) [RHEL-142315]
+- drm/amdgpu: don't attach the tlb fence for SI (Anusha Srivatsa) [RHEL-142315]
+- drm/displayid: add quirk to ignore DisplayID checksum errors (Anusha Srivatsa) [RHEL-142315]
+- drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct drm_edid_ident (Anusha Srivatsa) [RHEL-142315]
+- drm: nova: depend on CONFIG_64BIT (Anusha Srivatsa) [RHEL-142315]
+- drm/displayid: pass iter to drm_find_displayid_extension() (Anusha Srivatsa) [RHEL-142315]
+- drm/amd/display: Fix scratch registers offsets for DCN351 (Anusha Srivatsa) [RHEL-142315]
+- drm/amd/display: Fix scratch registers offsets for DCN35 (Anusha Srivatsa) [RHEL-142315]
+- drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() (Anusha Srivatsa) [RHEL-142315]
+- Revert "drm/amd/display: Fix pbn to kbps Conversion" (Anusha Srivatsa) [RHEL-142315]
+- drm/xe/oa: Always set OAG_OAGLBCTXCTRL_COUNTER_RESUME (Anusha Srivatsa) [RHEL-142315]
+- drm/xe/oa: Limit num_syncs to prevent oversized allocations (Anusha Srivatsa) [RHEL-142315]
+- drm/xe: Limit num_syncs to prevent oversized allocations (Anusha Srivatsa) [RHEL-142315]
+- drm/amdgpu: fix a job->pasid access race in gpu recovery (Anusha Srivatsa) [RHEL-142315]
+- drm/panel: sony-td4353-jdi: Enable prepare_prev_first (Anusha Srivatsa) [RHEL-142315]
+- drm/xe: Restore engine registers before restarting schedulers after GT reset (Anusha Srivatsa) [RHEL-142315]
+- drm/xe: Increase TDF timeout (Anusha Srivatsa) [RHEL-142315]
+- drm/me/gsc: mei interrupt top half should be in irq disabled context (Anusha Srivatsa) [RHEL-142315]
+- drm/xe: fix drm_gpusvm_init() arguments (Anusha Srivatsa) [RHEL-142315]
+- drm/xe: Apply Wa_14020316580 in xe_gt_idle_enable_pg() (Anusha Srivatsa) [RHEL-142315]
+- drm/xe: Fix freq kobject leak on sysfs_create_files failure (Anusha Srivatsa) [RHEL-142315]
+- drm/tests: Handle EDEADLK in set_up_atomic_state() (Anusha Srivatsa) [RHEL-142315]
+- drm/tests: Handle EDEADLK in drm_test_check_valid_clones() (Anusha Srivatsa) [RHEL-142315]
+- drm/tests: hdmi: Handle drm_kunit_helper_enable_crtc_connector() returning EDEADLK (Anusha Srivatsa) [RHEL-142315]
+- drm/i915/fbdev: Hold runtime PM ref during fbdev BO creation (Anusha Srivatsa) [RHEL-142315]
+- drm/{i915, xe}/fbdev: deduplicate struct drm_mode_fb_cmd2 init (Anusha Srivatsa) [RHEL-142315]
+- drm/{i915, xe}/fbdev: pass struct drm_device to intel_fbdev_fb_alloc() (Anusha Srivatsa) [RHEL-142315]
+- drm/i915/fbdev: make intel_framebuffer_create() error return handling explicit (Anusha Srivatsa) [RHEL-142315]
+- drm/xe/fbdev: use the same 64-byte stride alignment as i915 (Anusha Srivatsa) [RHEL-142315]
+- drm/amdkfd: Use huge page size to check split svm range alignment (Anusha Srivatsa) [RHEL-142315]
+- drm/nouveau: fix circular dep oops from vendored i2c encoder (Anusha Srivatsa) [RHEL-142315]
+- drm/nouveau: refactor deprecated strcpy (Anusha Srivatsa) [RHEL-142315]
+- drm/plane: Fix IS_ERR() vs NULL check in drm_plane_create_hotspot_properties() (Anusha Srivatsa) [RHEL-142315]
+- drm/panel: novatek-nt35560: avoid on-stack device structure (Anusha Srivatsa) [RHEL-142315]
+- drm/panthor: Prevent potential UAF in group creation (Anusha Srivatsa) [RHEL-142315]
+- drm/amdkfd: assign AID to uuid in topology for SPX mode (Anusha Srivatsa) [RHEL-142315]
+- drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() (Anusha Srivatsa) [RHEL-142315]
+- drm/panthor: Avoid adding of kernel BOs to extobj list (Anusha Srivatsa) [RHEL-142315]
+- drm/nouveau: restrict the flush page to a 32-bit address (Anusha Srivatsa) [RHEL-142315]
+- drm/tidss: Move OLDI mode validation to OLDI bridge mode_valid hook (Anusha Srivatsa) [RHEL-142315]
+- drm/tidss: Remove max_pclk_khz and min_pclk_khz from tidss display features (Anusha Srivatsa) [RHEL-142315]
+- drm/panthor: Fix potential memleak of vma structure (Anusha Srivatsa) [RHEL-142315]
+- drm/panthor: Fix UAF on kernel BO VA nodes (Anusha Srivatsa) [RHEL-142315]
+- drm/panthor: Fix race with suspend during unplug (Anusha Srivatsa) [RHEL-142315]
+- drm/panthor: Fix UAF race between device unplug and FW event processing (Anusha Srivatsa) [RHEL-142315]
+- drm/panthor: Fix group_free_queue() for partially initialized queues (Anusha Srivatsa) [RHEL-142315]
+- drm/panthor: Handle errors returned by drm_sched_entity_init() (Anusha Srivatsa) [RHEL-142315]
+- drm/imagination: Fix reference to devm_platform_get_and_ioremap_resource() (Anusha Srivatsa) [RHEL-142315]
+- accel/ivpu: Fix race condition when unbinding BOs (Anusha Srivatsa) [RHEL-142315]
+- drm: nova: select NOVA_CORE (Anusha Srivatsa) [RHEL-142315]
+- accel/ivpu: Remove skip of dma unmap for imported buffers (Anusha Srivatsa) [RHEL-142315]
+- drm/rcar-du: dsi: Fix missing parameter in RXSETR_...EN macros (Anusha Srivatsa) [RHEL-142315]
+- drm/amdgpu/userq: fix SDMA and compute validation (Anusha Srivatsa) [RHEL-142315]
+- drm/amdgpu: add userq object va track helpers (Anusha Srivatsa) [RHEL-142315]
+- accel/ivpu: Fix race condition when mapping dmabuf (Anusha Srivatsa) [RHEL-142315]
+- drm: atmel-hlcdc: fix atmel_xlcdc_plane_setup_scaler() (Anusha Srivatsa) [RHEL-142315]
+- drm/vgem-fence: Fix potential deadlock on release (Anusha Srivatsa) [RHEL-142315]
+- accel/ivpu: Fix DCT active percent format (Anusha Srivatsa) [RHEL-142315]
+- accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context() (Anusha Srivatsa) [RHEL-142315]
+- accel/ivpu: Rework bind/unbind of imported buffers (Anusha Srivatsa) [RHEL-142315]
+- drm/panel: visionox-rm69299: Don't clear all mode flags (Anusha Srivatsa) [RHEL-142315]
+- drm/panel: visionox-rm69299: Fix clock frequency for SHIFT6mq (Anusha Srivatsa) [RHEL-142315]
+- accel/ivpu: Ensure rpm_runtime_put in case of engine reset/resume fail (Anusha Srivatsa) [RHEL-142315]
+- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-138056]
+- lib/freader: support reading more than 2 folios (Waiman Long) [RHEL-138056]
+- lib: move freader into buildid.h (Waiman Long) [RHEL-138056]
+- sfc: fix potential memory leak in efx_mae_process_mport() (Michal Schmidt) [RHEL-96527 RHEL-99226]
+- sfc: replace min/max nesting with clamp() (Michal Schmidt) [RHEL-96527 RHEL-99226]
+- PCI/ERR: Remove remnants of .link_reset() callback (Michal Schmidt) [RHEL-96527 RHEL-99226]
+- sfc: unfix not-a-typo in comment (Michal Schmidt) [RHEL-96527 RHEL-99226]
+- net: Fix typos [sfc] (Michal Schmidt) [RHEL-96527 RHEL-99226]
+- sfc: falcon: refactor and document ef4_ethtool_get_rxfh_fields (Michal Schmidt) [RHEL-96527 RHEL-99226]
+- sfc: siena: eliminate xdp_rxq_info_valid using XDP base API (Michal Schmidt) [RHEL-96527 RHEL-99226]
+- sfc: eliminate xdp_rxq_info_valid using XDP base API (Michal Schmidt) [RHEL-96527 RHEL-99226]
+- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138021] {CVE-2025-38415}
+- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138021] {CVE-2025-38415}
+- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137980] {CVE-2025-38172}
+- perf/x86/intel/cstate: Add Clearwater Forest support (Michael Petlan) [RHEL-45066]
+- cpuidle: governors: menu: Select polling state in some more cases (Mark Langsdorf) [RHEL-120323]
+- cpuidle: governors: menu: Rearrange main loop in menu_select() (Mark Langsdorf) [RHEL-120323]
+- cpuidle: governors: menu: Avoid selecting states with too much latency (Mark Langsdorf) [RHEL-120323]
+- cpuidle: governors: menu: Avoid using invalid recent intervals data (Mark Langsdorf) [RHEL-120323]
+- cpuidle: psci: Fix cpuhotplug routine with PREEMPT_RT=y (Mark Langsdorf) [RHEL-120323]
+- cpuidle: dt: fix opencoded for_each_cpu() in idle_state_valid() (Mark Langsdorf) [RHEL-120323]
+- cpuidle: psci: Drop redundant sync_state support (Mark Langsdorf) [RHEL-120323]
+- cpuidle: psci: Opt-out from genpd's common ->sync_state() support (Mark Langsdorf) [RHEL-120323]
+- cpuidle: psci: Fix uninitialized variable in dt_idle_state_present() (Mark Langsdorf) [RHEL-120323]
+- cpuidle: psci: Avoid initializing faux device if no DT idle states are present (Mark Langsdorf) [RHEL-120323]
+- cpuidle: psci: Correct the domain-idlestate statistics in debugfs (Mark Langsdorf) [RHEL-120323]
+- cpuidle: psci: Move the per CPU variable domain_state to a struct (Mark Langsdorf) [RHEL-120323]
+- pmdomain: core: Add genpd helper to correct the usage/rejected counters (Mark Langsdorf) [RHEL-120323]
+- cpuidle: psci: Transition to the faux device interface (Mark Langsdorf) [RHEL-120323]
+- cpuidle: menu: Optimize bucket assignment when next_timer_ns equals KTIME_MAX (Mark Langsdorf) [RHEL-120323]
+- cpuidle: teo: Fix typos in two comments (Mark Langsdorf) [RHEL-120323]
+
 * Tue Feb 03 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-198.el10]
 - s390/cio: Update purge function to unregister the unused subchannels (Mete Durlu) [RHEL-145335]
 - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145336]
diff --git a/sources b/sources
index 3162b7e24..c95e6eaee 100644
--- a/sources
+++ b/sources
@@ -1,5 +1,5 @@
 SHA512 (kernel-abi-stablelists-6.6.0.tar.bz2) = 4f917598056dee5e23814621ec96ff2e4a411c8c4ba9d56ecb01b23cb96431825bedbecfcbaac9338efbf5cb21694d85497fa0bf43e7c80d9cd10bc6dd144dbd
 SHA512 (kernel-kabi-dw-6.6.0.tar.bz2) = 19308cd976031d05e18ef7f5d093218acdb89446418bab0cd956ff12cf66369915b9e64bb66fa9f20939428a60e81884fec5be3529c6c7461738d6540d3cc5c6
-SHA512 (linux-6.12.0-198.el10.tar.xz) = 9b3d044902493e19db5118c647d064176f139f1e47918625481a1d1605a201e67670cd6bda9d78e4ed5442165597031bb5917200b7cdd0ceedbeb685e92141e3
-SHA512 (kernel-abi-stablelists-6.12.0-198.el10.tar.xz) = d27ab7690f230b613a605a0bd7f0a47d98a34a151c6d4280c839d35113ab9f55e896d325b1173907f55fc7087f143e6727f74d7f85908761d45e02c025d73d55
-SHA512 (kernel-kabi-dw-6.12.0-198.el10.tar.xz) = f816f6026554269b246fddbd3906f95beea041c09e36e37c799300fef339f24417368c63abc981eaf8d7806c73c2dc52985ad55891ab0f46fd421a91cc3a4986
+SHA512 (linux-6.12.0-199.el10.tar.xz) = ac7cd0f39266c3495c3c5a58c55639a9bba28fc2fb01e182049ed300c9233b24c8f4cc34ca1fcc3eeb47aa9d4e070fdb0defeb4ee11b6c8e8d7fb62944c0f3c1
+SHA512 (kernel-abi-stablelists-6.12.0-199.el10.tar.xz) = df3b262db10067964537a3eb71ee7834864f55b8f7e10f5eb41910ed1dffff68065fdbf4dd06512eb5bbfdd2180374abdc198b67188aa877aa80372d064bd1e8
+SHA512 (kernel-kabi-dw-6.12.0-199.el10.tar.xz) = 11461aa3dec35bc0c40d503cc63ba4569e26c613d95d1dabd258317aa3c9b3496519c4b2a988f0c0f420327cf370ba2ccf036631aa6a54b632166728b13ea8c0